Login Authentication Policy

Updated on 2024-12-25 GMT+08:00

View PDF

The Login Authentication Policy tab of the Security Settings page provides the Session Timeout, Account Lockout, Account Disabling, Recent Login Information, and Custom Information settings. These settings take effect for both your account and the IAM users created using the account.

Only the administrator can configure the login authentication policy, and IAM users can only view the configurations. If an IAM user needs to modify the configurations, the user can request the administrator to perform the modification or grant the required permissions.

Session Timeout

Set the session timeout that will apply if you or users created using your account do not perform any operations within a specific period.

Figure 1 Session Timeout

The timeout ranges from 15 minutes to 24 hours, and the default timeout is 1 hour.

Account Lockout

Set a duration to lock users out if a specific number of unsuccessful login attempts has been reached within a certain period. You cannot unlock your own account or an IAM user's account. Wait until the lock time expires.

Figure 2 Account Lockout
Click to enlarge

The administrator can set the account lockout duration, maximum number of unsuccessful login attempts before the account is locked, and time for resetting the account lockout counter.

Lockout duration: The value range is from 15 to 30 minutes, and the default value is 15 minutes.
Maximum number of unsuccessful login attempts: The value range is from 3 to 10, and the default value is 5.
Time for resetting the account lockout counter: The value range is from 15 to 60 minutes, and the default value is 15 minutes.

Account Disabling

Set a validity period to disable IAM users if they have not accessed Huawei Cloud using the console or APIs within a certain period.

This option is disabled by default. It can be enabled by the administrator. The validity period is from 1 day to 240 days.

If you enable this option, the setting will take effect only for IAM users created using your account. If an IAM user is disabled, the user can request the administrator to enable their account again.

Recent Login Information

Configure whether you want the system to display the previous login information after you log in. If incorrect login information is displayed on the Login Verification page, change your password immediately.

This option is disabled by default and can be enabled by the administrator.

Custom Information

Set custom information that will be displayed upon successful login. For example, enter the word Welcome.

This option is disabled by default and can be enabled by the administrator.

Figure 3 Custom Information

You and all the IAM users created using your account will see the same information upon successful login.

Figure 4 Login verification
Click to enlarge

USB Key Certificate Expiration

To ensure service continuity, you can set a certificate expiration reminder to notify you of applying for a new USB key before the current one expires. The new USB key must be obtained within the certificate's validity time, or you will not be able to log in to the cloud platform after the current USB key expires. By default, you can receive a notification 10 days ahead of the expiration. You can set the notification time from 1 to 10 days.

This setting will be applied immediately for both your account and IAM users under your account.

Parent topic: Security Settings

Previous topic: Critical Operation Protection

Next topic: Password Policy